CVE-2024-54456 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() name is char[64] where th…
High CVSS: 7.8

CVE-2024-54456

In the Linux kernel, the following vulnerability has been resolved:

NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()

name is char[64] where the size of clnt->cl_program->name remains
unknown. Invoking strcat() directly will also lead to potential buffer
overflow. Change them to strscpy() and strncat() to fix potential
issues.
Vendor
Linux
Product
Linux Kernel
CWE
CWE-787
Yayın Tarihi
2025-02-27 03:15:10
Güncelleme
2025-10-23 13:05:11
Source Identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
KEV Date Added
-

Kategoriler

CWE-787 Linux Kernel HIGH Linux 2025

Referanslar

https://git.kernel.org/stable/c/19b3ca651b4b473878c73539febe477905041442 https://git.kernel.org/stable/c/49fd4e34751e90e6df009b70cd0659dc839e7ca8 https://git.kernel.org/stable/c/dd8830779b77f4d1206d28d02ad56a03fc0e78f7 https://git.kernel.org/stable/c/e8e0eb5601d4a6c74c336e3710afe3a0348c469d